CVE-2023-53583— perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
Quick assessment
Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未更新PERF_HES_STOPPED标志，可能导致警告和性能事件处理异常。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 096b52fd2bb4996fd68d22b3b7ad21a1296db9d3< aeb62beaf9cbd0a72e7f97c9af6d3e7f76ce2946 |
affected |
096b52fd2bb4996fd68d22b3b7ad21a1296db9d3< 8270d539a943d00cf6a094da0073e2b5972b641d |
affected | ||
096b52fd2bb4996fd68d22b3b7ad21a1296db9d3< 66843b14fb71825fdd73ab12f6594f2243b402be |
affected | ||
6.1 |
affected | ||
< 6.1 |
unaffected | ||
6.1.40≤ 6.1.* |
unaffected | ||
6.4.5≤ 6.4.* |
unaffected | ||
6.5≤ * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-53583
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()
Since commit 096b52fd2bb4 ("perf: RISC-V: throttle perf events") the
perf_sample_event_took() function was added to report time spent in
overflow interrupts. If the interrupt takes too long, the perf framework
will lower the sysctl_perf_event_sample_rate and max_samples_per_tick.
When hwc->interrupts is larger than max_samples_per_tick, the
hwc->interrupts will be set to MAX_INTERRUPTS, and events will be
throttled within the __perf_event_account_interrupt() function.
However, the RISC-V PMU driver doesn't call riscv_pmu_stop() to update the
PERF_HES_STOPPED flag after perf_event_overflow() in pmu_sbi_ovf_handler()
function to avoid throttling. When the perf framework unthrottled the event
in the timer interrupt handler, it triggers riscv_pmu_start() function
and causes a WARN_ON_ONCE() warning, as shown below:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 240 at drivers/perf/riscv_pmu.c:184 riscv_pmu_start+0x7c/0x8e
Modules linked in:
CPU: 0 PID: 240 Comm: ls Not tainted 6.4-rc4-g19d0788e9ef2 #1
Hardware name: SiFive (DT)
epc : riscv_pmu_start+0x7c/0x8e
ra : riscv_pmu_start+0x28/0x8e
epc : ffffffff80aef864 ra : ffffffff80aef810 sp : ffff8f80004db6f0
gp : ffffffff81c83750 tp : ffffaf80069f9bc0 t0 : ffff8f80004db6c0
t1 : 0000000000000000 t2 : 000000000000001f s0 : ffff8f80004db720
s1 : ffffaf8008ca1068 a0 : 0000ffffffffffff a1 : 0000000000000000
a2 : 0000000000000001 a3 : 0000000000000870 a4 : 0000000000000000
a5 : 0000000000000000 a6 : 0000000000000840 a7 : 0000000000000030
s2 : 0000000000000000 s3 : ffffaf8005165800 s4 : ffffaf800424da00
s5 : ffffffffffffffff s6 : ffffffff81cc7590 s7 : 0000000000000000
s8 : 0000000000000006 s9 : 0000000000000001 s10: ffffaf807efbc340
s11: ffffaf807efbbf00 t3 : ffffaf8006a16028 t4 : 00000000dbfbb796
t5 : 0000000700000000 t6 : ffffaf8005269870
status: 0000000200000100 badaddr: 0000000000000000 cause: 0000000000000003
[<ffffffff80aef864>] riscv_pmu_start+0x7c/0x8e
[<ffffffff80185b56>] perf_adjust_freq_unthr_context+0x15e/0x174
[<ffffffff80188642>] perf_event_task_tick+0x88/0x9c
[<ffffffff800626a8>] scheduler_tick+0xfe/0x27c
[<ffffffff800b5640>] update_process_times+0x9a/0xba
[<ffffffff800c5bd4>] tick_sched_handle+0x32/0x66
[<ffffffff800c5e0c>] tick_sched_timer+0x64/0xb0
[<ffffffff800b5e50>] __hrtimer_run_queues+0x156/0x2f4
[<ffffffff800b6bdc>] hrtimer_interrupt+0xe2/0x1fe
[<ffffffff80acc9e8>] riscv_timer_interrupt+0x38/0x42
[<ffffffff80090a16>] handle_percpu_devid_irq+0x90/0x1d2
[<ffffffff8008a9f4>] generic_handle_domain_irq+0x28/0x36
After referring other PMU drivers like Arm, Loongarch, Csky, and Mips,
they don't call *_pmu_stop() to update with PERF_HES_STOPPED flag
after perf_event_overflow() function nor do they add PERF_HES_STOPPED
flag checking in *_pmu_start() which don't cause this warning.
Thus, it's recommended to remove this unnecessary check in
riscv_pmu_start() function to prevent this warning.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未更新PERF_HES_STOPPED标志，可能导致警告和性能事件处理异常。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-53583
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-53583
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-10-04 · 144 CVEs total
| CVE-2025-39932 | 9.8 CRITICAL | smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) |
| CVE-2025-39948 | 9.8 CRITICAL | ice: fix Rx page leak on multi-buffer frames |
| CVE-2025-39946 | 9.8 CRITICAL | tls: make sure to abort the stream if headers are bogus |
| CVE-2025-39933 | 9.4 CRITICAL | smb: client: let recv_done verify data_offset, data_length and remaining_data_length |
| CVE-2025-39943 | 9.4 CRITICAL | ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer |
| CVE-2023-53600 | 9.1 CRITICAL | tunnels: fix kasan splat when generating ipv4 pmtu error |
| CVE-2023-53615 | 8.8 HIGH | scsi: qla2xxx: Fix deletion race condition |
| CVE-2025-39952 | 8.8 HIGH | wifi: wilc1000: avoid buffer overflow in WID string configuration |
| CVE-2023-53589 | 8.8 HIGH | wifi: iwlwifi: mvm: don't trust firmware n_channels |
| CVE-2023-53586 | 8.8 HIGH | scsi: target: Fix multiple LUN_RESET handling |
| CVE-2022-50493 | 8.8 HIGH | scsi: qla2xxx: Fix crash when I/O abort times out |
| CVE-2023-53598 | 8.4 HIGH | bus: mhi: host: Range check CHDBOFF and ERDBOFF |
| CVE-2023-53566 | 7.8 HIGH | netfilter: nft_set_rbtree: fix null deref on element insertion |
| CVE-2023-53536 | 7.8 HIGH | blk-crypto: make blk_crypto_evict_key() more robust |
| CVE-2023-53560 | 7.8 HIGH | tracing/histograms: Add histograms to hist_vars if they have referenced variables |
| CVE-2023-53559 | 7.8 HIGH | ip_vti: fix potential slab-use-after-free in decode_session6 |
| CVE-2023-53557 | 7.8 HIGH | fprobe: Release rethook after the ftrace_ops is unregistered |
| CVE-2023-53537 | 7.8 HIGH | f2fs: fix to avoid use-after-free for cached IPU bio |
| CVE-2023-53539 | 7.8 HIGH | RDMA/rxe: Fix incomplete state save in rxe_requester |
| CVE-2023-53545 | 7.8 HIGH | drm/amdgpu: unmap and remove csa_va properly |
Showing top 20 of 144 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2023-7356
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SE -
CVE-2026-98869
bpf: Infer zext_dst based on static register liveness analys -
CVE-2026-98868
dm-pcache: reject a kset that overruns its segment -
CVE-2026-98867
dm-pcache: bound the logical key offset from persistent memo -
CVE-2026-98866
sched/cache: Introduce task_struct->sched_cache_grp to fix U
Same vendor: Linux
-
CVE-2023-7356
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SE -
CVE-2026-98869
bpf: Infer zext_dst based on static register liveness analys -
CVE-2026-98868
dm-pcache: reject a kset that overruns its segment -
CVE-2026-98867
dm-pcache: bound the logical key offset from persistent memo -
CVE-2026-98866
sched/cache: Introduce task_struct->sched_cache_grp to fix U
V. Comments for CVE-2023-53583
No comments yet